Opendns for better & safer I-Net connection

Hi SBI-comm!

Anon has just shown me that page about Opendns, so I applied its service and have to say there's really nothing to complain about.

It was easy to set up, and should be more secure than your isp's dns because of web content filters (like blocking known phishing, malware sites) that can be set up when you register at their homepage. (it isn't needed for it to work, but lets you customize things)

Another benefit you get is that your internet connection becomes faster and more reliable as opendns states:

Quote:

---

We have a global network of servers with sophisticated software that make your DNS requests automatically go to the OpenDNS server that's physically closest to you. The result for you is an immediately-noticeable faster, more reliable Internet for everyone in your household.

---

The installation is supported with a step-by-step guide for both ppl with a direct connection to the internet (without routers) and ppl with routers! :top:

So I just recommend it to everyone who hasn't switched to opendns already, since it has no disadvantages and can be done in just two minutes. :wink:

home page: OpenDNS | Providing A Safer And Faster Internet
installation procedure: https://www.opendns.com/homenetwork/start/

greetz

Good thing to see fresh blood here :biggrin: Just wanted to say,that this technique is very good to keep a far distance from harmful malwares/ads or any suspicious contents while surfing the web...However,not every ISP supports such service knowing the fact that those ISP already setup special DNS addresses for their users by injecting those into a user's internal IP (so you don't have to set a DNS & just set it to Automatic detection)....

You might be wondering about this feedback,but from a long experience with DNS detection services due to my past experience with Online Games that require setting different multiple DNS to see what gets you the best stable connection with those games to avoid constant Disconnections...

Still,I would Recommend users to use such a technique if their ISP doesn't support certain DNS Ad/s as they will a bit difference while they surf around...

Good Job Buddy :top:

Aurion, vDD has been around for quite a while :wink:

And yes, it's possible that your ISP straight blocks these servers. For example, if you're forced to browse behind a transparent HTTP proxy, by design you'd be using their DNS servers regardless of the "network connections" settings.

There's a simple method to check this:

• Go to Start -> Run -> type cmd and press ENTER.
• Type:
  
  Code:

  ---

  telnet 1.1.1.1 80

  ---

  and press ENTER:
  
  
  • if telnet freezes at "connecting to 1.1.1.1"... you're not behind a transparent proxy.
  • if you see a black screen for like 20 seconds, and then something about having disconnected from the host, then you are behind a transparent proxy.

For the latter case, this happens because the proxy catches all connections going to port 80 somewhere (you -> proxy -> host), and then checks if the actual IP you're connecting to is valid or not.

I have once been behind one such proxy. It was frustrating, since my idiotic ISP had set it to cache everything to save bandwidth and avoid buying new equipment. I could solve this by using my scripts to find and reclaim IPs that weren't affected.

Quote:

---

Originally Posted by anon

Aurion, vDD has been around for quite a while :wink:

---

W** :shockkk!: I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts :tongue:

Quote:

---

And yes, it's possible that your ISP straight blocks these servers. For example, if you're forced to browse behind a transparent HTTP proxy, by design you'd be using their DNS servers regardless of the "network connections" settings.

There's a simple method to check this:

• Go to Start -> Run -> type cmd and press ENTER.
• Type:
  
  Code:

  ---

  telnet 1.1.1.1 80

  ---

  and press ENTER:
  
  
  • if telnet freezes at "connecting to 1.1.1.1"... you're not behind a transparent proxy.
  • if you see a black screen for like 20 seconds, and then something about having disconnected from the host, then you are behind a transparent proxy.

For the latter case, this happens because the proxy catches all connections going to port 80 somewhere (you -> proxy -> host), and then checks if the actual IP you're connecting to is valid or not.

I have once been behind one such proxy. It was frustrating, since my idiotic ISP had set it to cache everything to save bandwidth and avoid buying new equipment. I could solve this by using my scripts to find and reclaim IPs that weren't affected.

---

Maybe I can test that....I will check once I get home (I'm still @ work)....still I don't think it has something to do with being behind a Transparent Proxy or not,since it's set already on "Automatic Detect" for both DNS servers & IP despite being behind a router...

Quote:

---

Originally Posted by Aurion

W** :shockkk!: I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts :tongue:

---

Oh, I see :biggrin:

Quote:

---

Maybe I can test that....I will check once I get home (I'm still @ work)....still I don't think it has something to do with being behind a Transparent Proxy or not,since it's set already on "Automatic Detect" for both DNS servers & IP despite being behind a router...

---

In my case it didn't matter what you set "network connection" settings to, requests would always go through my provider's proxy. It would be the one to resolve hostnames instead of whatever server(s) I set - proven by OpenDNS' welcome page. :redface:

If you want to be sure, do the test, it only takes a minute :top:

Quote:

---

Originally Posted by anon

In my case it didn't matter what you set "network connection" settings to, requests would always go through my provider's proxy. It would be the one to resolve hostnames instead of whatever server(s) I set - proven by OpenDNS' welcome page. :redface:

If you want to be sure, do the test, it only takes a minute :top:

---

Even,if it's proven by them,this doesn't have to be working for everyone...I mean some users already can't set fixed DNS servers as their ISP won't let them,or it sets certain narrow DNS ranges that proven to work for this specific country....Anyway,I will do that test for sure once I get home...:top:

Quote:

---

Originally Posted by Aurion

W** I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts

---

no offense, but i had the same in mind as anon *lol*, i assumed really that you thought i'm kind of a freshman :wink:

greetz

Quote:

---

Originally Posted by Aurion

Even,if it's proven by them,this doesn't have to be working for everyone...

---

It should, since OpenDNS' servers are the only ones that'll resolve the hostname for the welcome page correctly.

Quote:

---

I mean some users already can't set fixed DNS servers as their ISP won't let them,or it sets certain narrow DNS ranges that proven to work for this specific country....

---

That's true, because sometimes you can even get through basic traffic shaping doing so. :top:

So afterall,still I'm convinced that not all Inet users can benifit from such technique as I mentioned earlier that most of those DNS servers they provide might be kinda Blocked or over-riden by ISPs as they have their own servers to set...Eventually I don't care honestly if I use them or not as long as I'm Cool :biggrin:

Quote:

---

Originally Posted by Aurion

as I mentioned earlier that most of those DNS servers they provide might be kinda Blocked or over-riden by ISPs

---

Mmm, now I think about it, I really don't know why those that specifically (not as a side effect of another limitation) block other DNS servers do it - if suscribers use these custom ones, they take load off the ISP's by not using them, which is good!

It's also possible (as shown by the link I've posted before) for custom DNSs to bypass BitTorrent shaping - but if your provider's shaper equipment is as stupid as to easily be bypassed with that measure, it deserves it :biggrin: Wish my provider's was :biggrin:

LOL Yeah but you know still I don't see the idea behind just blocking certain DNS servers and using custome made ones for every specific country ? Despite that I don't use my own DNS servers I receive upon registering with my ISP...I just leave it set on "Automatic Detection" for both DNS & IP,however,being on a router...So Yeah,it's kinda LAME ! :biggrin:

thanks Man but i think u could either check them with ExtraDns it have multi function with using them as extra DNS servers rather than ur ISP and testing every each DNS u use inside the software :)

if someone know better software than extraDNS plz i need to know :)

I have to agree that OpenDNS is a service that is well worth the effort to easily set up on your computer.

One can set up what the user wants to prevent his browser from visiting such as some adware or even sites that are not operational anymore. You know,...the sites that state that this domain is not available anylonger, or dating sites or porn-related sites...etc...etc...its quite good actually.

So I also recdommed the service. :smile:

Quote:

---

Originally Posted by rebrov

thanks Man but i think u could either check them with ExtraDns

---

Isn't ExtraDNS just a caching program?

Been using OpenDNS on all my computers for a long time now. I don't go on the internet without it! OpenDNS is so fast and reliable it beats the hell out of my ISPs DNS servers.

The sad thing is I tried GRC's | DNS Nameserver Performance Benchmark
And OpenDNS is much slower than my native ISP DNS. That is why I keep it au natural :D

I can vouch for GRC, and yes some dns might be slower, but there is slower and than it's noticeably slow.
I usually use Google's DNS as it is quite fast and easy to remember:
8.8.8.8 and 8.8.4.4
and for ipv6
2001:4860:4860::8888 and 2001:4860:4860::8844

I feel a little bad about this, but after almost 5 years of using OpenDNS, I think I might switch to this on my upcoming Windows reinstalls. I never liked the redirects to search pages and stuff when you try to load a non-existent domain. A good server should tell you there's no such name in those cases. You can turn it off with an account, but that's for a single IP only (ownership of which can be readily verified, logically) before there were some drawbacks.

you can try out a squid linux server for filtering URL ..and working as a firewall ...and if u want a speed u can make it a DNS Cache only server ...im using it my self and it working so great ..with high speed and very secure :)

Quote:

---

Originally Posted by fuzzy

I can vouch for GRC, and yes some dns might be slower, but there is slower and than it's noticeably slow.
I usually use Google's DNS as it is quite fast and easy to remember:
8.8.8.8 and 8.8.4.4
and for ipv6
2001:4860:4860::8888 and 2001:4860:4860::8844

---

Thanks for the ipv6 addresses I didn't know. But I think that in the choice of a DNS resolver, the speed is not the only criteria to take in consideration. In particular, Google has already too much info about us (Gmail, Google search engine, Chrome...), Moreover, Google is an US enterprise, and US law being what they are, I find no necessity to give in addition to Google the identity of each site we visit.

i used it for nearly 6 months and it worked fairly........................just the point of problem is that a client can overcome the blocking but inserting its own DNS servers available free over the internet.

Quote:

---

Originally Posted by byondemand

i used it for nearly 6 months and it worked fairly........................just the point of problem is that a client can overcome the blocking but inserting its own DNS servers available free over the internet.

---

same issue am experiencing bro still fining a fix

I was a big fan of OpenDNS when this thread was created, but unless your provider's name servers block sites or routinely fail to the point of unusability, I cannot no longer recommend the usage of any third-party ones.

http://www.sb-innovation.de/showthread.php?t=28759